1. 24
  1. 4

    Why does every vulnerability come with it’s own catchy acronym and slick webpage now?

    1. 8

      Generally easier to remember, identify, and communicate than CVE IDs.

      Are we vulnerable to ALPACA?

      versus

      Are we vulnerable to CVE-2021-31971?

      1. 6

        At least they’re getting more adorable over time!

        1. 6

          Why does every vuln with a name get at least one person asking this exact question?

          1. 3

            Why does every vuln with a name get at least one person asking the question of why every vuln with a name gets at least one person asking why every vuln needs a name now?

          2. 3

            A Bug With A Logo? It worked the first time…

            In fact, thinking back, this trick still worked for POODLE, in the sense of management-level people caring enough to ask about it and organising statements that “we’re now protected against POODLE” or “we’re unaffected by POODLE” etc. But no branded vuln since has had any real boost from its marketing, as far as I recall – nobody cares, just the way everyone discussing this aspect of Heartbleed could foresee right from the start. The marketing has just become this motion you go through because it’s what everyone does.

            1. 2

              Crypto bros are a very weird crowd worried a lot about publicity and street cred.